{"report_id":"e8eda18e-4073-49a8-aa05-a940fee4a3bc","version":6,"status":"done","tags":[],"date":"2026-04-18T13:05:34Z","url":{"schema":"http","addr":"b-1x.me/nb6mnb5","fqdn":"b-1x.me","domain":"b-1x.me","tld":"me"},"ip":{"addr":"18.153.158.227","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"title":"1xBet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"b-1x.me/nb6mnb5","fqdn":"b-1x.me","domain":"b-1x.me","tld":"me"},"ip":{"addr":"18.153.158.227","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T13:05:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"refpa5574.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"b-1x.me","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"b-1x.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"b-1x.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-04-12T22:40:20.943298Z","alert_count":0,"request_count":2,"received_data":1680,"sent_data":1991,"comment":"","tags":null,"fingerprints":null},{"fqdn":"v3.traincdn.com","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2022-11-10","domain_rank":256434,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2026-04-16T06:11:03.780152Z","alert_count":0,"request_count":29,"received_data":3084777,"sent_data":14549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"1xlite-49657.bar","ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-09-12","domain_rank":0,"first_seen":"2026-04-17T14:45:52.775504Z","last_seen":"2026-04-17T14:45:52.775504Z","alert_count":0,"request_count":12,"received_data":68875,"sent_data":9038,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]},{"fqdn":"refpa5574.com","ip":{"addr":"83.147.205.1","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Iran","country_code":"IR"},"domain_registered":"2025-01-21","domain_rank":0,"first_seen":"2025-07-31T07:22:21.307283Z","last_seen":"2026-04-17T12:04:31.683514Z","alert_count":1,"request_count":1,"received_data":3275,"sent_data":721,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"216.58.201.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-04-12T22:40:20.744789Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":665,"comment":"","tags":null,"fingerprints":null},{"fqdn":"b-1x.me","ip":{"addr":"18.158.99.161","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-07-08","domain_rank":0,"first_seen":"2026-04-17T12:04:30.824994Z","last_seen":"2026-04-17T12:04:30.824994Z","alert_count":3,"request_count":1,"received_data":3581,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-12T22:24:43.06808Z","alert_count":0,"request_count":4,"received_data":1779130,"sent_data":1802,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1xbet.onelink.me","ip":{"addr":"52.84.50.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-11-26","domain_rank":448841,"first_seen":"2020-09-12T05:42:28Z","last_seen":"2026-04-16T22:31:15.037086Z","alert_count":0,"request_count":1,"received_data":3638,"sent_data":970,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-12T22:38:35.592234Z","alert_count":0,"request_count":5,"received_data":2615,"sent_data":4308,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c71aa80fcb0fe3088a11f45eaea50e2a","sha1":"28cc96d264efe7a14badf6853928c2860cf90cda","sha256":"b3965a00efb34054eb11d0407c14527d6fe5c1b8b1427ea193222e6f03a965e7","sha512":"c35f0318dffd1813e6703f4ff9f791fc97e378d22c59fc6345370a41e57813d9bded91fe769b17660788f54f31342c86171acb856a3bcc036c111b94f76ccfbb","ssdeep":"","tlshash":"7b2187261b1c8733455890adc162b3d384f251673502c45cd47d8c12a91f7c35dcd8d3","size":1237,"data":"","first_seen":"2026-04-09T09:37:58.877846Z","last_seen":"2026-04-20T22:28:57.869827Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/entry-972de8c70b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"70522afdab4dd69951bb22e4938b8773","sha1":"b080943edffc7237d104bd49159a653babe027a0","sha256":"881c0e0c13a6520e1d2b281b358a81fbfc7c72b68d32490d511bc096f5115f15","sha512":"15eaea30e761fb31fc9d932134e23ead073bb328a9a1c1cb7fbdcae34a3db958a0126ca7a678f3bf79f93cf05fc82adc0b6050f550b51f7bcc9093f955e8bbf6","ssdeep":"384:HjI+bRffXkW4TWwOvMGwI69n2MkmueJd1UzEbwN2u6W0j7TE0zSAgqH9SoV1CcdF:HkcwWvMVI693kmueJd1UzOwNl6Bj7T9H","tlshash":"efa22f78219cf0f531cb459837f6bc5266886d1ff98afc9a409789dc03da14cc9627ae","size":21584,"data":"","first_seen":"2026-04-09T09:37:58.845309Z","last_seen":"2026-04-20T22:28:57.791458Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/dbce4a34a0.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a97bbe5da47b5a4fe52f2e79c2b6fa8a","sha1":"6a42fb5bb6593b33c9ae13e74355326bdf3dcfdd","sha256":"29f1adade31b303983b4bedada659d804ba875708423e4e079ccddf167b5714e","sha512":"fd2d105baf1c699e146bb036f7aef48098d7d763c84663dcff1b0886a2f66ea5a523543314ae616d49a51d9f11c03624830e3e9975244bbdfa91957e64f46db2","ssdeep":"","tlshash":"a82163be6db4e0346b501aee3d29253243c93d93954ad09b2acc43a503970185f79fbb","size":1178,"data":"","first_seen":"2026-04-09T09:37:58.851983Z","last_seen":"2026-04-20T22:28:57.794677Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/cdc3ac3265.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f56c057e63dc5f828693fecb4640f479","sha1":"d0657543f69c8b9864a5272a91fa48aaebcfab26","sha256":"8246b134f9ba8cc0848ef3459754d0f5d0d673439183d923e3982117bd6dc56e","sha512":"8ff38cb9fe6bd33a1be4798a4dca576359bbb7467b94e6fdf21641cfb956481207175a7fb0317de8f71cc4f7b4689889b8307124e16a190dc41c19af5fcbc56b","ssdeep":"","tlshash":"ab7175466c78f1f6bb0782a83d2344f0cb1fac2ae05449ead1b4cbac229d5952532f57","size":3677,"data":"","first_seen":"2026-04-09T09:37:58.838589Z","last_seen":"2026-04-20T22:28:57.808106Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e64g0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4e77abd286cef11b4bd936715c199c0","sha1":"227b3abbae58b86bd2776519c953cd2c04f75671","sha256":"c575000e600e781587c8881db863b48d8829b53c14c6beb43fe8b8c171c97919","sha512":"b1ce00dd805946429a59ff6e461d154b31d666e4f8686858997f57de50d4ea2c5b5d1ad67295a433062ae0b2288d0a3c42c99a60ef74c5d92750b3c40c2dada4","ssdeep":"6144:p+8jXPcVWD/1nqBZ8osjqpBKPzqQjKwd2b9NVWDbWK:7ECnqn8MkCvcDT","tlshash":"449408cdb3d6706653a3b478903f018ba57a29a2f44cc899f185cce42e7469a4277f7c","size":421567,"data":"","first_seen":"2026-04-18T09:37:38.663505Z","last_seen":"2026-04-18T13:05:41.465004Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dafb343aac3fe5ca646b209532d36997","sha1":"53e7e61d359e4302e8a8a993ef87941addbdcd3a","sha256":"27054e18281f5b986021cef8efafab9b9fbf6b6dc64a0027cca8bbb3050dc6d4","sha512":"2431a1f17b00f26dd58d329f3c4bcd32aeacc95ece9d1ac6086772ba90aa32700431daabebc5431f41654b2018b3bb9638215e2c0953c16188a17ccc8673c125","ssdeep":"","tlshash":"f6e0cd969519f61b5c33681d896c8b0f95c97e75500d795dc034855c3a53456106723a","size":308,"data":"","first_seen":"2025-12-10T10:19:59.465768Z","last_seen":"2026-05-19T09:54:34.325552Z","times_seen":1816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"0f52fc8c693ecafc1d77320a696ce65b","sha1":"5d5d9a13c7a17a19b0295cdc8bd3594117fe0a29","sha256":"a77313a1c518701af1f3c36dda4ab891bd2fc7c2d32025ae8ac66c7b97a3770a","sha512":"f1ce1fb5b8b1b49a30bb0950422a5c1762d72301befe8a6c51bc8af716e1148c7438bc9c9cd8a76e6ff89281c1e01a4391fc7777d03da8b07b8918d597b50d0a","ssdeep":"","tlshash":"ed900253565df52c30a004050695d64732953d6a2417712221b05109e60154a4417277","size":57,"data":"","first_seen":"2026-03-18T19:53:45.72592Z","last_seen":"2026-05-19T09:54:34.316022Z","times_seen":1235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_3d7cf69bce.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"102227f6d98a6d333b539d3b95ae4277","sha1":"c34fd6156c157b63470e462906e20fada422d609","sha256":"2e8510dc9267a29d0d21eed8bc862e02959b495ed21dfc7748726f38458e15f7","sha512":"2cc487cae10b08b1b2f2e68d44136f22452654e47b2a03337021099929bbcfb67711f49bea350ae7e7f6221d1d003e8caf1f6cd72819166b006e0965fd60931d","ssdeep":"49152:N3HA3YLBZS1bW8xEjBOrzW2O2uEOmNRWew0AU:ypbRf","tlshash":"f1859e95f285bc3b1fdb5ad7a0330005a2ad196cc418f490f5dae9e93ade484916fb3c","size":1754885,"data":"","first_seen":"2026-04-09T09:37:58.879705Z","last_seen":"2026-04-21T08:21:58.372892Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/e2c97070a2.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3618726b7bc9bdb4428c9b65acea465","sha1":"731e15942683545106cfa48f0c41bad8387aec5f","sha256":"886663fd11446e83f569570483176cc930b2209cd2f4d698fed7537edfb2867d","sha512":"450694fa8fbd72db8957fe3fd637815e9a495375048dec8ab441f0922c758f4cce5558cb615c157b5dfd9b338504163a6a0e9aa1286504ee87ff87b2df3203dd","ssdeep":"","tlshash":"0571c86e2efc78b861590f5f6b5364e00ea88d13d39d5873ea5a0f340339045e6359f6","size":3823,"data":"","first_seen":"2026-04-09T09:37:58.866532Z","last_seen":"2026-04-20T22:28:57.857693Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_1c3eaa7178.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"414e8029e21e558fd9d07bd1d919c3c4","sha1":"616aa94cb106a7684ccc214de20d5a85071f8d70","sha256":"36d14d379f6c74f3bfaf138903d6f8aa4a6e0ae6f93f45303caadb0db6c0e1fa","sha512":"1a9d8949916f0f5ad19b45dbc7804768926698fe01c32fe4b435f00294a4c2632ca1e9e79c1cb774baeb18008fe8609e374ee6d5c27e92808c41c30545ee2550","ssdeep":"","tlshash":"47f0239b38949078076e27e09373d75a7052154d744abc30f7895c5878364e6641f65c","size":449,"data":"","first_seen":"2025-12-18T05:17:53.538942Z","last_seen":"2026-08-08T12:13:41.24995Z","times_seen":1289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffca8ef560a5ea98936d12c31a50b6a0","sha1":"021a4c2d26f362dbc14e3e4b9372a4175b5551d9","sha256":"d381df1253254f287d09c60c7668aa067174d87360ca6d322d0660193132de0d","sha512":"b9df27b8545d01a460e6de542ff40fafedf06ee6802a082670cff828fa9b34f16c5596fcbf5ae53ed335e5bed53fcbd04eaaee4cd8edeb7281eed880fd59547c","ssdeep":"6144:pO4OjKgwCA4MRBZtffJPj8B3U90yIjwcHfpL7gW1e77pkN1PLAXc:Wwt4MPffJL8j5W7pkcM","tlshash":"acc409ceb3c674265396f468942f01cba97b24e2b49cc8abb1d9ccf02d3454a5167f78","size":552075,"data":"","first_seen":"2026-04-18T08:11:04.643879Z","last_seen":"2026-04-18T13:05:41.494535Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5958626d70b5125a3319077fd54fd60","sha1":"63c3d4a440f2e6d70cbd4407a8f4b9a37f805852","sha256":"05074dbf41929d4ad850525725fff269ed2309384f3a9e94989c9e611c8ca9d7","sha512":"fe83bda0426386461ad100d9426250741b273271dbb3a9879ea535f3f0752daa72172c53fe0a260cdf12a3dbc3a8e3ae226789fb42106de225c71e2e7833abe3","ssdeep":"6144:y+8jvPcVWD/1nqBZ8osjqpBKPzqQjuqdObqNi25AY+K:QECnqn8AKa6iO","tlshash":"729419cdb3d6746693a2b478903f018ba57a39a2f44cc895f186cce42d7469a4273f7c","size":431871,"data":"","first_seen":"2026-04-18T09:37:38.676817Z","last_seen":"2026-04-18T13:05:41.503761Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1df90b63cd87136babac18cd4e1e120e","sha1":"b398a881c9c9a0db7a50f76d0d5150ff7166311e","sha256":"affcaa29f182e808194c1614e2c14979f63dcd48ed6ba906a8fd10f1a31b5789","sha512":"3786bb1e1a07a69b4c1eb0b40605ed1c9d8df8bb967c36c144b466408633e2eaae05c455624ca3f2da831e9dfc36743a540c1cd851c39e9262e70f3db16abe34","ssdeep":"","tlshash":"c46000200000002800a0280022222a002288800000000a000080820a28aa0030800080","size":15,"data":"","first_seen":"2026-03-12T22:10:14.591684Z","last_seen":"2026-07-26T07:36:09.674108Z","times_seen":1869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/c087b51afb.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"bf29e55a19aa9e4414c5ed4c811e6d0e","sha1":"4a6ef1a81c67fce8958404e94ed56386da1e477e","sha256":"8715b0311728c0d1b01c94e3e071c67ef3d9afc9b239975d349811aed749d3ea","sha512":"d999432d1cd2790ac9997a83e68c213133ae2f9b4a27b43374d18d1ffdcb8b8fc8902cce047a715dc3edd0a8166a3add0f510663c56e5a74075de885adf9129b","ssdeep":"192:FhjzBlcd6BMtcdfSWq7leXqOsc8uALOCJexCePmtbJtdytT:HjzBlcduMtcdfSWq7leJfpAL9Je5PmtQ","tlshash":"1bf11bd839f870b36b6383dd3c224071472d5a46a08d58e6f9f84f6c019e68c997bb63","size":7781,"data":"","first_seen":"2026-04-09T09:37:58.840151Z","last_seen":"2026-04-20T22:28:57.799143Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f978b4369d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a4af5789426796fafd3970de96371be","sha1":"ebdd29b76f8e6d20d0f1e41b17e032080872ff2b","sha256":"09adb51065cb406cb94d9809a73d3a05a29ad79ff58c1042790bee2308a88a8c","sha512":"e2a8d26c266ae1347566c938c7e1dc2944f7b228b2ac2bf0ef6dc37375edb82a348cce310a05b9a117139ca00d09ec23ec53509dbd9286b14aa8bb9a3d5f73b4","ssdeep":"","tlshash":"93e0684fb19a4c35168a78e843f5d70822d7226520473c21abac982c3964aabc417e5d","size":389,"data":"","first_seen":"2025-12-18T00:40:38.932063Z","last_seen":"2026-07-24T08:16:23.48126Z","times_seen":1789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e64g0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8593ec0b7690a3bc5976e1e5883e24bb","sha1":"f3efa7bc0b5b57923d9350839c830db344e9be49","sha256":"4ebd582157e1940e6f0a55b94676ff4b9939449547f8243ff922357bd5346906","sha512":"8c572d76486ac084ca5f385454575376e8fd77f7f12a793435668f372aec5d195c2ce115bb71061e5385029af636fb54e0491dcbfe3fe4a5b7bfff724da75a43","ssdeep":"6144:j+8j3PcVWDhn3BZ8os6BKPzqQjwXd2bY2YWdK:9EWn3n88NCvns","tlshash":"e87408ccb3d6746653a3a478903f008bb27a7992f84cc895f186d8e42e746994277f7c","size":370291,"data":"","first_seen":"2026-04-18T09:37:38.66222Z","last_seen":"2026-04-18T13:05:41.492149Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b586df631e8d6666ff04bc7191cd758","sha1":"863d1ff67fa1fad16d222718b374734c5fcee1c1","sha256":"8be332f4507bdfdcd91306f72b51067058dad275a0470b60d198d47a5c1d7bc8","sha512":"8b6bb4ed5c3d6561979b90924ee75a182762a91737ba2d186df431e0dd18d8450d4c593f6538780835832d76049c003832ecec2927dc3f990eacd59f4bca00ca","ssdeep":"","tlshash":"ff017b1f82651ebf12015d04cb079618b7cc31aa72db6150d2b80a6a678e7dbbd1a9e4","size":707,"data":"","first_seen":"2026-04-02T12:33:57.90696Z","last_seen":"2026-05-19T07:37:19.441255Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je64f1v897130004za200zd897130004\u0026_p=1776517522966\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=536818938\u0026_eu=AEAAAGQ\u0026ae=a\u0026cid=844467639.1776517523\u0026frm=0\u0026pscdl=noapi\u0026rcb=10\u0026sr=1280x1024\u0026ul=en-us\u0026_s=2\u0026tag_exp=0~115616985~115938465~115938468~117266401\u0026sid=1776517523\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock%3Fgame%3D65405%26tag%3Dd_265749m_21895c_\u0026dt=1xBet\u0026_tu=KA\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026tfd=17390","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:28.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je64f1v897130004za200zd897130004\u0026_p=1776517522966\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=536818938\u0026_eu=AEAAAGQ\u0026ae=a\u0026cid=844467639.1776517523\u0026frm=0\u0026pscdl=noapi\u0026rcb=10\u0026sr=1280x1024\u0026ul=en-us\u0026_s=2\u0026tag_exp=0~115616985~115938465~115938468~117266401\u0026sid=1776517523\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock%3Fgame%3D65405%26tag%3Dd_265749m_21895c_\u0026dt=1xBet\u0026_tu=KA\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026tfd=17390 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://1xlite-49657.bar\r\ndate: Sat, 18 Apr 2026 13:05:28 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ntraceparent: 00-bb227aa4eedf8dac54d7d324c692dfca-11ce6fc7777b1783-01\r\nlast-modified: Fri, 17 Apr 2026 15:18:43 GMT\r\netag: \"ab34908b1d79d387aac283295dac110a\"\r\nx-amz-meta-mtime: 1776439061.644024186\r\nexpires: Fri, 17 Apr 2026 15:21:14 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 39\r\ncache: HIT\r\nx-cached-since: 2026-04-18T13:04:33+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"ab34908b1d79d387aac283295dac110a","sha1":"52b81d3086150ecdc019fc76ca81ad528af6d7ac","sha256":"5eace19047fd9eadc721c4e818de56a07891e0bf14142b3a7bd465b573db990c","sha512":"b6069c395ba0657419f243f2dfe2448cc7184a79525e1426c6d7c6e07e6a12e1ce3741de82cfbf98a5642133754b8b6db4c0dcc90b88a142aee0d402fa1d1afe","ssdeep":"","tlshash":"ab5000000cc000000300c0300c0c0000c00c00f00c0000000c0c000f00c00000000300","first_seen":"2026-03-18T06:25:42.866074Z","last_seen":"2026-08-08T12:13:41.333761Z","times_seen":1929,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/3.3.658/Desktop/Default/client.l.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-ui/3.3.658/Desktop/Default/client.l.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-9fb8b3744d45fc91337f3a970013f91a-c5a1e36dab793c8a-01\r\nlast-modified: Thu, 02 Apr 2026 11:30:00 GMT\r\netag: W/\"336b54451048ec7daedd3c8533e7eead\"\r\nx-amz-meta-mtime: 1775129398.350220286\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Apr 2026 09:10:10 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc16\r\nage: 13986\r\ncache: HIT\r\nx-cached-since: 2026-04-18T09:12:06+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":601003,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26001)","md5":"336b54451048ec7daedd3c8533e7eead","sha1":"fe734764bb1878682496fe89a4f3dc6fa099483e","sha256":"f39f5fd9ff731521cbfae0077888e5d8c98f3bd6f7fa535c5da5c5024e728254","sha512":"8b7216ab1f0a34cccd42202d0166ec30e5433a98249de912f19b566860bd3b2d6954344a965a3fc968dbd7fe729236a7e26aea8457212e4bb890e2f0ede3f24b","ssdeep":"12288:/Mq4dAD0AvVS4jnZuSLzeHDptQ3L9KrGDwI5R:+dAD0A84jvX5R","tlshash":"e9d4941cf59dd1393e37e92142989efc2620f347df22195ef05d02990ec369361a6eab","first_seen":"2026-04-09T10:33:51.219118Z","last_seen":"2026-04-21T08:21:58.366597Z","times_seen":286,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/desktop/media_asset/2109bdcab2eeeb5f8b317407c150d526.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/desktop/media_asset/2109bdcab2eeeb5f8b317407c150d526.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e64g0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:23.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e64g0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\nexpires: Sat, 18 Apr 2026 13:05:23 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 18 Apr 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:70:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:70:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:70:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:70:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 143506\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421567,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"d4e77abd286cef11b4bd936715c199c0","sha1":"227b3abbae58b86bd2776519c953cd2c04f75671","sha256":"c575000e600e781587c8881db863b48d8829b53c14c6beb43fe8b8c171c97919","sha512":"b1ce00dd805946429a59ff6e461d154b31d666e4f8686858997f57de50d4ea2c5b5d1ad67295a433062ae0b2288d0a3c42c99a60ef74c5d92750b3c40c2dada4","ssdeep":"6144:p+8jXPcVWD/1nqBZ8osjqpBKPzqQjKwd2b9NVWDbWK:7ECnqn8MkCvcDT","tlshash":"449408cdb3d6706653a3b478903f018ba57a29a2f44cc899f185cce42e7469a4277f7c","first_seen":"2026-04-18T09:37:38.663505Z","last_seen":"2026-04-18T13:05:41.465004Z","times_seen":2,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je64f1v897130004za200zd897130004\u0026_p=1776517522966\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=536818938\u0026_eu=AAAAAGA\u0026cid=844467639.1776517523\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=10\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115616985~115938465~115938468~117266401\u0026sid=1776517523\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock%3Fgame%3D65405%26tag%3Dd_265749m_21895c_\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026upn.ref_id=1\u0026tfd=12336","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:23.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je64f1v897130004za200zd897130004\u0026_p=1776517522966\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=536818938\u0026_eu=AAAAAGA\u0026cid=844467639.1776517523\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=10\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115616985~115938465~115938468~117266401\u0026sid=1776517523\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock%3Fgame%3D65405%26tag%3Dd_265749m_21895c_\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026upn.ref_id=1\u0026tfd=12336 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-49657.bar\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":34,"dns":0,"connect":8,"send":0,"wait":20,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_0fcc3a.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_0fcc3a.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-11ac9e1a3f8e6da4b7c61e7d0cf817ba-13fcfd3c0e02b253-01\r\nlast-modified: Fri, 17 Apr 2026 15:19:50 GMT\r\netag: W/\"bc81edf98a9e03145e7995a357f97beb\"\r\nx-amz-meta-mtime: 1776439061.667024314\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Apr 2026 09:10:40 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 13986\r\ncache: HIT\r\nx-cached-since: 2026-04-18T09:12:06+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":23439,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13051)","md5":"bc81edf98a9e03145e7995a357f97beb","sha1":"f76d3bbcea31441811616faea48b0a8a2281b78f","sha256":"0fcc3ab8d2686a54418e74aa8a9972b304d9ada6efd821d643a04cdabfc93c01","sha512":"5c2e4999d835fb3663e6886d438b9023cb3e0a4ff32ab908adf381033185cf0757b0546d25b2fa80a7d346a4a893f9d07fd0ade14a28a79ce83aef8f06f20112","ssdeep":"384:jBEY441c8VRTnhnmb8oas+5CxsscvdfAXjCaVYe8+rxdYAktm4r:joas+7","tlshash":"19b2431dece495736e27a521538cbe7c15f4f42bee320e59f81e832016c3baa14e1d69","first_seen":"2026-04-09T10:33:51.203793Z","last_seen":"2026-05-27T09:27:36.508614Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":53,"dns":1,"connect":12,"send":0,"wait":9,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/bff-api/config/group/get?groups=b.core,d.core\u0026lang=en","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=b.core,d.core\u0026lang=en HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.008, bff;dur=1.55, wf-uht;dur=0.023\r\nvary: Accept-Encoding\r\nx-cache-expire: 763\r\nx-cache-hit: 1\r\nx-dt: 285\r\nx-pod: R-bfdz5\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":49389,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7c7ec35f0612f832826997178e81579d","sha1":"7d68610fe861cedfa96e04941bc2795905bab9cc","sha256":"b007fe17d0802cb5b47e0ff7d556c7d9e4564591a9b7ff8f802390c5f30ced32","sha512":"b5c4911d6459ed67b45823b710e93fff859f98bc9b49ba79c4814d0582f5516ade4797709f01b42fe7f0df732cdc1a17dc1ff4803ebd658aa9470f11565917a9","ssdeep":"768:OTJtcsYpvGaofx77FJcJrgOsbzl+0cNVF7DCfqUQv6:OltRYpvGaofxNJcJrtCzl+0cND7cqh6","tlshash":"d523fe5e75d05a3a401f1eb9cc63ed0e57e80f1b1c93e46699e3bd8a28b292444e347f","first_seen":"2026-04-18T01:11:09.12356Z","last_seen":"2026-04-19T18:32:13.953306Z","times_seen":34,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-icons/1.0.1001/285/country.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-icons/1.0.1001/285/country.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-b2c1474825f2435575460028bd940e47-a845d89799bac0ee-01\r\nlast-modified: Thu, 16 Apr 2026 10:08:50 GMT\r\netag: W/\"e755054847ccc09de8ac9bdf2c4326d6\"\r\nx-amz-meta-mtime: 1776334124.758732319\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Apr 2026 10:18:22 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 9844\r\ncache: HIT\r\nx-cached-since: 2026-04-18T10:21:09+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":217418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e755054847ccc09de8ac9bdf2c4326d6","sha1":"1461e05caf5c7bfda69a9a45127a8f78dc37a9ec","sha256":"d03bc4c7e0d2d128ba647df7ef393f9e856ff0b98b09d6d2849bdaaaded8e7b9","sha512":"2a6e1617fe4b5f4039431564fdb2d90f8a4a930ea555e10133b9d07809ebe56f64cfc9000de709289b2cb9143664bb8e334cabf2d49c7c20dac9ba8ed0eee9ce","ssdeep":"3072:hgvO+igz5Wy8EjUskAnA3ZJ9QeVCLpE74OWuhgwlKqjk71xhbXVjGYLGS/suV1SM:uqCLpPOWuq5vaSueoO7","tlshash":"08245554b099b14c2a8363e8c7afa5e1133e61db71da419938e993d8520e3dffe83950","first_seen":"2025-08-28T01:30:48.467208Z","last_seen":"2026-05-07T11:42:09.284783Z","times_seen":1871,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refpa5574.com/L?tag=d_265749m_21895c_\u0026is_retargeting=true\u0026r=casino-search?game=65405\u0026site=265749\u0026c=d_2959571m_97c_\u0026pid=retention\u0026oos_url=https://www.bkre23.com/downloads/androidclient/releases_android/1xbet/site/1xbet.apk\u0026ad=21895\u0026af_force_deeplink=true","fqdn":"refpa5574.com","domain":"refpa5574.com","tld":"com"},"ip":{"addr":"83.147.205.1","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T13:05:11.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refpa5574.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:10 GMT","end":"Sun, 10 May 2026 05:20:09 GMT"},"fingerprint":{"sha1":"EA:AB:C1:1F:30:E9:23:0C:DF:C1:33:F5:FA:7A:40:B5:70:B1:20:70","sha256":"A0:73:E9:7B:EE:44:C8:51:9A:78:BA:81:D3:B4:89:64:52:39:5B:C0:F9:06:2A:D0:40:87:EC:71:36:19:03:19"}}},"request":{"raw":"GET /L?tag=d_265749m_21895c_\u0026is_retargeting=true\u0026r=casino-search?game=65405\u0026site=265749\u0026c=d_2959571m_97c_\u0026pid=retention\u0026oos_url=https://www.bkre23.com/downloads/androidclient/releases_android/1xbet/site/1xbet.apk\u0026ad=21895\u0026af_force_deeplink=true HTTP/1.1\r\nHost: refpa5574.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:11 GMT\r\nlocation: https://1xlite-49657.bar:443/en/casino-search?game=65405\u0026tag=d_265749m_21895c_\r\nset-cookie: A_21895_v=0; expires=Sun, 19 Apr 2026 13:05:11 GMT; path=/; secure\nA_21895_c=1; expires=Sun, 19 Apr 2026 13:05:11 GMT; path=/; secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":105,"dns":1,"connect":32,"send":0,"wait":47,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"refpa5574.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.onelink.me/2qRg?pid=retention\u0026c=d_2959571m_97c_\u0026is_retargeting=true\u0026af_force_deeplink=true\u0026af_dp=xbet://open/casino?section=categories%26type=game%26id=65405%26needTransfer=false\u0026af_web_dp=https://refpa5574.com/L?tag=d_265749m_21895c_\u0026site=265749\u0026ad=21895\u0026r=casino-search?game=65405\u0026af_android_url=https://refpa5574.com/L?tag=d_265749m_21895c_\u0026site=265749\u0026ad=21895\u0026r=casino-search?game=65405\u0026af_ios_url=https://refpa5574.com/L?tag=d_265749m_21895c_\u0026site=265749\u0026ad=21895\u0026r=casino-search?game=65405","fqdn":"1xbet.onelink.me","domain":"onelink.me","tld":"me"},"ip":{"addr":"52.84.50.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T13:05:11.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.onelink.me","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 05 Mar 2026 00:00:00 GMT","end":"Fri, 18 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:09:6D:82:B5:A8:07:CD:95:EA:C0:87:FC:AE:24:7B:4C:D7:B8:91","sha256":"73:94:BA:51:C6:AF:AC:98:2E:0E:BB:02:0A:42:10:E3:97:18:3D:EC:AF:56:2C:1D:9C:10:2F:BE:28:04:05:56"}}},"request":{"raw":"GET /2qRg?pid=retention\u0026c=d_2959571m_97c_\u0026is_retargeting=true\u0026af_force_deeplink=true\u0026af_dp=xbet://open/casino?section=categories%26type=game%26id=65405%26needTransfer=false\u0026af_web_dp=https://refpa5574.com/L?tag=d_265749m_21895c_\u0026site=265749\u0026ad=21895\u0026r=casino-search?game=65405\u0026af_android_url=https://refpa5574.com/L?tag=d_265749m_21895c_\u0026site=265749\u0026ad=21895\u0026r=casino-search?game=65405\u0026af_ios_url=https://refpa5574.com/L?tag=d_265749m_21895c_\u0026site=265749\u0026ad=21895\u0026r=casino-search?game=65405 HTTP/1.1\r\nHost: 1xbet.onelink.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nlocation: https://refpa5574.com/L?tag=d_265749m_21895c_\u0026is_retargeting=true\u0026r=casino-search?game=65405\u0026site=265749\u0026c=d_2959571m_97c_\u0026pid=retention\u0026oos_url=https://www.bkre23.com/downloads/androidclient/releases_android/1xbet/site/1xbet.apk\u0026ad=21895\u0026af_force_deeplink=true\r\ndate: Sat, 18 Apr 2026 13:05:11 GMT\r\ncache-control: no-cache, no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: t4iZ3Xy7_eL8QYKnmJaRr3vfjEzJT_5zhseVCP3qxLb8Z5PUzfHI7w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":120,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/non-embedded.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/non-embedded.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-2317c1aad0c2972bc2eab04ccce032ff-d6546a47f6c5c8d9-01\r\nlast-modified: Thu, 16 Apr 2026 09:28:00 GMT\r\netag: W/\"03bfd404aedaaa744bda3e5b186a43db\"\r\nx-amz-meta-mtime: 1776331631.175800347\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Apr 2026 17:44:23 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 69595\r\ncache: HIT\r\nx-cached-since: 2026-04-17T17:45:17+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35002,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (35001)","md5":"03bfd404aedaaa744bda3e5b186a43db","sha1":"ecb39c6fe35e96b364e60dbb252d7dc10b80784b","sha256":"5b16f2191f8ec6ada107664d08dcf2971b0ce55de16813dca484f18576b10bb7","sha512":"d3eee8e1eb1f1275b8e83f7b9d383129bb2af12181e4894792312dc186b12477925af2e53539f170ec2a0ea1b98473aa39d45c2953cd414567eda3fffb858bb6","ssdeep":"384:Nm2Ixar8n5rz0f0uL/FrLrw+++Tj1jRpO54FZsa6XvKc:Q2xqgHc+++rpOOAic","tlshash":"28f27316da401667f9278a2a29d8fb0c75e8e107ed730e2df019d1188fd7f9f1aa0794","first_seen":"2026-04-09T20:38:49.80371Z","last_seen":"2026-08-08T12:13:41.290768Z","times_seen":1519,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":48,"dns":0,"connect":7,"send":0,"wait":9,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/81b06e9c69.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/81b06e9c69.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-07197131a5af4306ba67f05e770b900c-75fcfa3acdfef554-01\r\nlast-modified: Thu, 16 Apr 2026 09:28:00 GMT\r\netag: W/\"eeabedb4f33a8e154c5f23dc9ce31951\"\r\nx-amz-meta-mtime: 1776331631.140797493\r\ncontent-encoding: gzip\r\nexpires: Sat, 18 Apr 2026 09:49:16 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc16\r\nage: 11747\r\ncache: HIT\r\nx-cached-since: 2026-04-18T09:49:26+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3994,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3994), with no line terminators","md5":"eeabedb4f33a8e154c5f23dc9ce31951","sha1":"9d670018b216dd6e4cdfec278c83a2a6e7924cb3","sha256":"d25dc01a8e4f9574683945333fec5317ad81ba94a790f8dd55c13e82df1ea488","sha512":"ed4d352a9a3791e4821ecaeacf6c856ef1ecd2acb277a01afa6c6aa5b5779b6c2abe73eadd7ff31826bcd276104ffa37dff80e1010f37b95ea77b9fcfcb7a39c","ssdeep":"","tlshash":"fd81a9bebcb898320537e021a6596e7d0a71f51bd6200f85e00993681cc36d36df2da8","first_seen":"2026-04-09T09:37:58.872385Z","last_seen":"2026-04-21T08:21:58.342844Z","times_seen":272,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/desktop/media_asset/e6baed4eecf4ba7f9a5c2fcf97aad110.webp","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/desktop/media_asset/e6baed4eecf4ba7f9a5c2fcf97aad110.webp HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6642\r\ntraceparent: 00-ac740f72b4e6be7efb0e08c3f56861f0-48ab2875721ff15b-01\r\nlast-modified: Tue, 28 Oct 2025 08:17:54 GMT\r\netag: \"f2a90faef41c53fb4af747c8cbf25485\"\r\nexpires: Thu, 13 Nov 2025 16:22:44 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc22\r\nage: 1531\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:39:42+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":6642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2a90faef41c53fb4af747c8cbf25485","sha1":"54855a9fb307c4ecc9afea135838328cf439162e","sha256":"993540582d4cab4dc40ba13392f7460f30f0b656ff1e413abe9c20387000cc92","sha512":"c6f5e9a6238a864affd37952ba241b4e5a01dbfad9a18e22b53ea00e6f3acbbf114a5752f0b5faecd89efa6d24990df365113d7321543d0d44cfab1987f123a8","ssdeep":"96:MdOd7t6i+bJODeMN38LbY5gZQpRDH/ij1TgpEV6iuRjxNY4wos4RWNFCjMzlAm92:MduSOXsv6DfiR8fisNk9X3qUhpg","tlshash":"d7d1b074a2c81a958a299e763e763dab6e81039c31bcb6d674b5d5c8c50843fede7030","first_seen":"2025-11-13T15:27:51.525317Z","last_seen":"2026-07-21T05:23:56.637678Z","times_seen":2171,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/analytics-module-api/v1/analytics?projectId=285\u0026domain=1xlite-49657.bar","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"GET /analytics-module-api/v1/analytics?projectId=285\u0026domain=1xlite-49657.bar HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==; lng=en; cookies_agree_type=3; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: application/json\r\ncontent-length: 200\r\nx-request-id: 994c03d32859b1e6c9ee6ddc3fd08ad0\r\nx-request-guid: 994c03d32859b1e6c9ee6ddc3fd08ad0\r\nx-server-name: Analytics\r\ncache-control: public, max-age=300, stale-while-revalidate=60\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=0, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":200,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa76cb7ac4a154dcda01b4f5834af3de","sha1":"5f67f1947e3f4fffae5973ee93dc9b65a979fe22","sha256":"1c42fecbfa69632d40b6a9f8da0f8f92f47234e33b125ec4862579690709a668","sha512":"d636b04dd956f45d2d55408cfbe9445f44b611e30c8578769c45da6411f613ea21efb91aa4e1cc98f77e1783eb164169ac1ea206677dcb91fae18cd4018186f5","ssdeep":"","tlshash":"afd01212d185eeec944395d0509eae2a93ee60335da715c14a50db31d1fd8783020f5f","first_seen":"2026-03-31T08:13:38.467056Z","last_seen":"2026-05-13T08:38:45.947255Z","times_seen":408,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/cdc3ac3265.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/cdc3ac3265.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-adabe1757bee7bfbf80b3489dc3a9eee-7da71e11d779da17-01\r\nlast-modified: Thu, 09 Apr 2026 13:51:07 GMT\r\netag: W/\"f56c057e63dc5f828693fecb4640f479\"\r\nx-amz-meta-mtime: 1775742611.917299523\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Apr 2026 09:20:40 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 11575\r\ncache: HIT\r\nx-cached-since: 2026-04-18T09:52:18+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3677,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3676)","md5":"f56c057e63dc5f828693fecb4640f479","sha1":"d0657543f69c8b9864a5272a91fa48aaebcfab26","sha256":"8246b134f9ba8cc0848ef3459754d0f5d0d673439183d923e3982117bd6dc56e","sha512":"8ff38cb9fe6bd33a1be4798a4dca576359bbb7467b94e6fdf21641cfb956481207175a7fb0317de8f71cc4f7b4689889b8307124e16a190dc41c19af5fcbc56b","ssdeep":"","tlshash":"ab7175466c78f1f6bb0782a83d2344f0cb1fac2ae05449ead1b4cbac229d5952532f57","first_seen":"2026-04-09T09:37:58.838589Z","last_seen":"2026-04-20T22:28:57.808106Z","times_seen":175,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/06c9b68c4f5819c83cc220a9024bbee1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/06c9b68c4f5819c83cc220a9024bbee1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 54\r\ntraceparent: 00-4270e86ac12eb631a012cada7955eeb7-63c9ddb9cab052f9-01\r\nlast-modified: Thu, 26 Mar 2026 13:23:36 GMT\r\netag: \"06c9b68c4f5819c83cc220a9024bbee1\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 26 Mar 2026 15:16:20 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc10\r\nage: 1420\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:41:33+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":54,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"06c9b68c4f5819c83cc220a9024bbee1","sha1":"72061d9a7ff428838a3ffbeea37f5b239685d24d","sha256":"b78dcd52b6ad0b04c4e35350f6bfc45cdf407c55b71f49ac5e201bb403213450","sha512":"f75445453afaa7b628853122e9ca4dd668545de13331ee0d3b10d1f59429293f7a324464bfbae5eb4bc31a25968d4c0142fad5f42dd0d1053e27f5762e72629a","ssdeep":"","tlshash":"76900299a50822502669c666519d48d12184125b4511369ce5527911f446c819950689","first_seen":"2026-03-26T08:31:53.670846Z","last_seen":"2026-08-08T12:13:41.229133Z","times_seen":1923,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=844467639.1776517523\u0026gtm=45je64f1v897130004za200zd897130004\u0026rcb=10\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616985~115938465~115938468~117266401\u0026z=1039157984","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"216.58.201.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:23.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:38:39 GMT","end":"Mon, 22 Jun 2026 08:38:38 GMT"},"fingerprint":{"sha1":"28:27:63:E6:8D:9F:5E:83:2F:93:1D:17:8F:A5:D2:B4:07:94:69:56","sha256":"86:54:70:19:0A:EA:E1:98:29:B7:6F:10:12:6D:C3:A7:B8:98:D6:2B:0A:87:0F:67:18:D0:50:E3:8A:88:B0:BF"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=844467639.1776517523\u0026gtm=45je64f1v897130004za200zd897130004\u0026rcb=10\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616985~115938465~115938468~117266401\u0026z=1039157984 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-11T18:56:40.920339Z","times_seen":1027532,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":125,"dns":4,"connect":21,"send":0,"wait":37,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/RobotoVariable/RobotoVariable.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/RobotoVariable/RobotoVariable.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 147664\r\ntraceparent: 00-e3e0c3d151701a27a32c742f625a5137-2a5d36e111b8b4f9-01\r\nlast-modified: Mon, 02 Mar 2026 14:14:17 GMT\r\netag: \"41b28e1bd72ac670c2ee83ad0ea538da\"\r\nexpires: Thu, 09 Apr 2026 10:20:13 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 2282\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:27:10+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 147664, version 3.983","md5":"41b28e1bd72ac670c2ee83ad0ea538da","sha1":"c1292620ead9a033a7b327322216949db358ada0","sha256":"a54eb5cfffedfd09c478b7d8d991e6b353fd1972706a2b91e7176b79e03c415d","sha512":"868f9f44cf7666b07b637b8b0afe2031530db26a4b0748d5dfacdcef0ea34bffd0da482986c2f91e85a7d0fa3bbf674b874d822b4a87e343ba121a45000f3cc6","ssdeep":"3072:NQFAi+ZiSPWfR5V/J9EbkjFL8BQJdj6mSUYlmLerzCSIfz4EVTS:q1CPWbV/Egx8BqdsJlmSrzmzjVe","tlshash":"1ee313c6a0e2d9c856761ffda1152ea248dd3a28de0f6f66344331345ffaea4107dc26","first_seen":"2026-04-09T09:37:58.836007Z","last_seen":"2026-08-08T12:13:41.254111Z","times_seen":1622,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 57\r\ntraceparent: 00-8cc4b8ffe91293b2e7e1c33ebc2e43b5-71e6a57adb9c4b78-01\r\nlast-modified: Thu, 16 Apr 2026 09:28:00 GMT\r\netag: \"0f52fc8c693ecafc1d77320a696ce65b\"\r\nx-amz-meta-mtime: 1776331631.032788687\r\nexpires: Fri, 17 Apr 2026 14:46:04 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 80254\r\ncache: HIT\r\nx-cached-since: 2026-04-17T14:47:38+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"0f52fc8c693ecafc1d77320a696ce65b","sha1":"5d5d9a13c7a17a19b0295cdc8bd3594117fe0a29","sha256":"a77313a1c518701af1f3c36dda4ab891bd2fc7c2d32025ae8ac66c7b97a3770a","sha512":"f1ce1fb5b8b1b49a30bb0950422a5c1762d72301befe8a6c51bc8af716e1148c7438bc9c9cd8a76e6ff89281c1e01a4391fc7777d03da8b07b8918d597b50d0a","ssdeep":"","tlshash":"ed900253565df52c30a004050695d64732953d6a2417712221b05109e60154a4417277","first_seen":"2026-03-18T19:53:45.72592Z","last_seen":"2026-05-19T09:54:34.316022Z","times_seen":1235,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/e2c97070a2.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/e2c97070a2.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-2b46282969b1d36e2d711340ce8d5eee-9b3d4a04fb1ad2df-01\r\nlast-modified: Thu, 09 Apr 2026 13:51:07 GMT\r\netag: W/\"c3618726b7bc9bdb4428c9b65acea465\"\r\nx-amz-meta-mtime: 1775742611.919299657\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Apr 2026 09:20:28 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 11726\r\ncache: HIT\r\nx-cached-since: 2026-04-18T09:49:46+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3823,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3354)","md5":"c3618726b7bc9bdb4428c9b65acea465","sha1":"731e15942683545106cfa48f0c41bad8387aec5f","sha256":"886663fd11446e83f569570483176cc930b2209cd2f4d698fed7537edfb2867d","sha512":"450694fa8fbd72db8957fe3fd637815e9a495375048dec8ab441f0922c758f4cce5558cb615c157b5dfd9b338504163a6a0e9aa1286504ee87ff87b2df3203dd","ssdeep":"","tlshash":"0571c86e2efc78b861590f5f6b5364e00ea88d13d39d5873ea5a0f340339045e6359f6","first_seen":"2026-04-09T09:37:58.866532Z","last_seen":"2026-04-20T22:28:57.857693Z","times_seen":176,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/87d85cf941.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/87d85cf941.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-2f126844de6a4f5fecf04476a56457f0-8c3af72fad7d5815-01\r\nlast-modified: Thu, 16 Apr 2026 09:28:00 GMT\r\netag: W/\"166a33fdde3212c99a3650b2bd84a031\"\r\nx-amz-meta-mtime: 1776331631.159799042\r\ncontent-encoding: gzip\r\nexpires: Sat, 18 Apr 2026 09:51:48 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 11566\r\ncache: HIT\r\nx-cached-since: 2026-04-18T09:52:27+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3147,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3147), with no line terminators","md5":"166a33fdde3212c99a3650b2bd84a031","sha1":"ed1ea9972b60b03ee2683a49971471d2c43214d3","sha256":"1b142a730444fde6e3764c1e083c053aea96ff7c5bc2f02225438e7e76ed101f","sha512":"33fd7490cb34a836846838e8cb5aa6d5d2526225966c4f83e39e1ebfce1a3ada00cc5bab41e18dbbda241cab9321e7873707983224bbc9e5749408069155feb5","ssdeep":"","tlshash":"4b51685e742a50ae10379c054bd14f1d235ff20eda1a13b8f406d62878cba9326ed4ab","first_seen":"2026-04-09T09:37:58.829205Z","last_seen":"2026-07-21T05:23:56.642213Z","times_seen":994,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=6\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1737882608.1776517523\u0026dt=1xBet\u0026auid=477815454.1776517523\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64g0h2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1776517523480\u0026tfd=12334","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:23.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:37:36 GMT","end":"Mon, 22 Jun 2026 08:37:35 GMT"},"fingerprint":{"sha1":"08:79:9D:7F:DB:8C:0A:9F:3E:E2:C7:8A:F2:4D:E4:E2:5B:36:28:22","sha256":"07:42:F0:13:40:B6:A1:62:31:62:8E:96:2F:96:8C:7C:C0:5B:F0:8A:DB:0B:A6:E2:44:14:41:7D:B2:7C:B9:74"}}},"request":{"raw":"GET /ccm/collect?rcb=6\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1737882608.1776517523\u0026dt=1xBet\u0026auid=477815454.1776517523\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64g0h2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1776517523480\u0026tfd=12334 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_d341a708b3f8bb13d916a5611b9404a9.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_d341a708b3f8bb13d916a5611b9404a9.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-8e2e48857267b2949762e31f8a5d4c29-8b246c627ecd43f3-01\r\nlast-modified: Fri, 17 Apr 2026 16:09:09 GMT\r\netag: W/\"58840202ed3246c20979ebea90a5166b\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Apr 2026 17:16:20 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 2638\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:21:15+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154883,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"58840202ed3246c20979ebea90a5166b","sha1":"65ada75778730b76bde09b4191f9a286e7cf8107","sha256":"9cd758a7ba61e4748a2d62d9631c60d1c42d91aca0692d06d37597ac86968603","sha512":"3fde249b26dca02c55ee6c319d667fa0c22c7dacfea0b5dfc475b161bf53cb53f01460e2dc69d17ab1857382e9735f746da63980144f37cc576d28869b333620","ssdeep":"3072:IV+H5z8iZcIkZPePfxxlRrPoViI3LuWkc6WrsHMf7JmcpcZv:IXQXlRrPoViIuW2HMf7JmcGN","tlshash":"a8e3e80b194c6e7b0bda12edf98fdf4962b000456ab2c822d8eec51e7257fd2917714b","first_seen":"2026-04-17T16:50:35.501221Z","last_seen":"2026-04-20T13:18:23.329774Z","times_seen":89,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_092441fd9e119a0aa627b127d0943689.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_092441fd9e119a0aa627b127d0943689.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-075837b9fbc74fa69ce68f29ab4f2eb7-084f3934d3432996-01\r\nlast-modified: Thu, 09 Apr 2026 14:08:33 GMT\r\netag: W/\"3e8249ef245b150101de2ecd74adf142\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 09 Apr 2026 15:24:22 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 867\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:50:46+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4831,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3e8249ef245b150101de2ecd74adf142","sha1":"a6c167a8f33157278b166d46bd7c6715463c0c37","sha256":"2a962c496b9bf3de25419285f7c0751f078502ee1c4321a47591b50bf1be4902","sha512":"17dc7ad1f51008d1c7810cfd2b71d2bdf4dc7d25537cfb80e0df62e41d2b1f6e328fd93e6c0be2ceedccb0db8381cab16d9115e2a37c26165482f8770989fdbc","ssdeep":"48:YDXkR16tcWpROgwcyU/VcyRRyD4HxSixS0t2ltM/L9J9bpcyLlpcy5xp7EqzCe4R:lYcbOo00aL9xJiXMWhH/jHxL81L5m","tlshash":"11a16f0f733c14e53a2941803d0e6e6e7b1202683e626295fa8dd8ad377e5dae13711f","first_seen":"2026-04-09T15:38:38.413902Z","last_seen":"2026-05-13T14:11:32.403018Z","times_seen":593,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/fa36f18490059c800e6ca1639950a75e.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/fa36f18490059c800e6ca1639950a75e.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-c84c33542a97cc07ab7d14b2ef6d410e-36eedc52fa349cea-01\r\nlast-modified: Wed, 08 Apr 2026 06:43:37 GMT\r\netag: W/\"1f0fd46179810824aa9d7c6e088cb430\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 08 Apr 2026 07:47:48 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc16\r\nage: 1531\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:39:42+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5243,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f0fd46179810824aa9d7c6e088cb430","sha1":"67e2764c0d1a11bf3eaa439f162c9979b1308e60","sha256":"a8059b7aa09cef46e5ad90c445ac16c0f982b414c0a6d05b061060da27aa0417","sha512":"5df53f7a19621edcb930505de48e22d57bdae7e8ceb9b7dd162eb33d1aac10abd4e8bc987d0c2ea68506de2bdd515f1b4c15067a8c6d3f5563e9d9100b3ea1e5","ssdeep":"48:TzABItkABwgABCNU8ABAHAB0EABzzuFABIIv4ABBxS/sABYEwABOt73ABBidABJj:9t4ljvL33lxyiBLH","tlshash":"52b12b88fff09863001f94b8e9f7ba4aa7c40f07a85a99287fdd35091f546054466ebe","first_seen":"2026-04-08T07:38:45.302136Z","last_seen":"2026-06-09T11:30:02.073284Z","times_seen":1017,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/12256f33914d5a00e117534984161a0a.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/12256f33914d5a00e117534984161a0a.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 6344\r\ntraceparent: 00-813c4ada1f2fe4836323606ff763561c-ecbdf85b05ed6214-01\r\nlast-modified: Mon, 06 Apr 2026 08:19:03 GMT\r\netag: \"5cb10800cb3db105ba581c986b07cba3\"\r\nexpires: Mon, 06 Apr 2026 09:48:50 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 467\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:57:26+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":6344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"5cb10800cb3db105ba581c986b07cba3","sha1":"79087f7bbb90a4ee817512efc77fa654def26001","sha256":"4597147951bfdca71934f51079ff15f7933843487923b1d20d8704a7a3ac225e","sha512":"1140391b11b16134e17239d87aec5e8144a9683932771ae167ee9ee4a1a255569fb06c6380da49b6cd83ee23be2b067e9994e7f3ed560c46289133d5893044f7","ssdeep":"192:1SMld686sOsozPYix9Cv75fSAxyg1N2zlt:UI686sOFzI7Mg1N0lt","tlshash":"93d1aed662da0c41c6021a29501e1e85bb14a8d68c6e810d2fd35761bff74d3724e6ed","first_seen":"2026-04-06T11:38:50.603521Z","last_seen":"2026-08-08T12:13:41.321464Z","times_seen":1098,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=6\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1737882608.1776517523\u0026dt=1xBet\u0026auid=477815454.1776517523\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64g0h2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1776517523480\u0026tfd=12334","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:23.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:37:36 GMT","end":"Mon, 22 Jun 2026 08:37:35 GMT"},"fingerprint":{"sha1":"08:79:9D:7F:DB:8C:0A:9F:3E:E2:C7:8A:F2:4D:E4:E2:5B:36:28:22","sha256":"07:42:F0:13:40:B6:A1:62:31:62:8E:96:2F:96:8C:7C:C0:5B:F0:8A:DB:0B:A6:E2:44:14:41:7D:B2:7C:B9:74"}}},"request":{"raw":"POST /ccm/collect?rcb=6\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1737882608.1776517523\u0026dt=1xBet\u0026auid=477815454.1776517523\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64g0h2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1776517523480\u0026tfd=12334 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-49657.bar\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":74,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/en/casino-search?game=65405\u0026tag=d_265749m_21895c_","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T13:05:11.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"GET /en/casino-search?game=65405\u0026tag=d_265749m_21895c_ HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:11 GMT\r\ncontent-length: 0\r\nlocation: /en/block?game=65405\u0026tag=d_265749m_21895c_\r\nset-cookie: platform_type=desktop; Path=/; Expires=Tue, 21 Apr 2026 13:05:11 GMT; Secure; SameSite=None; Partitioned\ngw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 21 Apr 2026 13:05:11 GMT; Secure\nauid=ua+mumnjgYdAT6lCAxfBAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.011, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":161,"dns":62,"connect":31,"send":0,"wait":46,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T13:05:11.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"GET /en/block?game=65405\u0026tag=d_265749m_21895c_ HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:11 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 2836\r\ncache-control: no-store, no-cache, must-revalidate\r\nserver-timing: dt_total;dur=0.129, dt_total;dur=0.007, total;dur=2;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 21 Apr 2026 13:05:11 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 285, 285\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1305)","md5":"64cf7c453f6fa0be2d2ed60ab40220b9","sha1":"ba93d8d804b7cc3a99a869fece89b7ada71cfa4b","sha256":"65ebff61096a678503627ca43addc9f2d6eee31bc5781f75dfc9727cb0cac8bb","sha512":"d1d3c9d79156b4b545c4963bc5e9a4f7ba26aa1fe352e87a9279ddb43fa32705e8ddfc1404b76d5ff3437b4d5fe4db8209ec224d19c1bac9d7acdfa8358f87c0","ssdeep":"","tlshash":"6851b62b5b28ce3f05106458c623e39ae5cd71bb714be498c0b84d192b8e3c3ac4f8e5","first_seen":"2026-04-09T15:38:38.410432Z","last_seen":"2026-04-20T19:36:24.580727Z","times_seen":129,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_3d7cf69bce.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_3d7cf69bce.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-8f5f33cd7e1d867632f304ab169d89a0-8895b121f9f22002-01\r\nlast-modified: Fri, 17 Apr 2026 15:19:50 GMT\r\netag: W/\"102227f6d98a6d333b539d3b95ae4277\"\r\nx-amz-meta-mtime: 1776439061.663024291\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Apr 2026 09:10:25 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 13927\r\ncache: HIT\r\nx-cached-since: 2026-04-18T09:13:05+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1754885,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24159)","md5":"48c66001297810ae87d4dd44885c53c2","sha1":"8b2a969b92b6344e2367b176d152ee27ab96e0d1","sha256":"b70cf7a40d619ba26c01dfe27287a550f14030f94af9a3667d4218814579dde6","sha512":"cf2f1cca7e32a4901b3b546392e97717d465eda1d79bb39f0e41b9aad393c1560bae272574d338c2083d557a2ba8d6737c0fcdc272225fed97ec3afb359ba97f","ssdeep":"24576:N3HA3+3LBZt81bSJN8xEjBOrzW2O2uEOmNRI:N3HA3YLBZS1bW8xEjBOrzW2O2uEOmNRI","tlshash":"23259ea1f281b92f2beb6bd790230046a2ed1d6cc424f490f5d7dde939ce454916eb2c","first_seen":"2026-04-09T09:37:58.854477Z","last_seen":"2026-04-21T08:21:58.332673Z","times_seen":298,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8a7c4eed7bb220bd1ef3acc3293e6318.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8a7c4eed7bb220bd1ef3acc3293e6318.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-1677f7be3e7c9ba16b80291b902460fd-d413a0024379c395-01\r\nlast-modified: Sun, 11 Jan 2026 03:45:37 GMT\r\netag: W/\"677a4ece3382ef2d011629b8df407544\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:20:42 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.048\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 2138\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:29:35+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"677a4ece3382ef2d011629b8df407544","sha1":"db65fa524058f62f4dd41f81549dc3e7009ed70f","sha256":"f5d023b35116dc2ff09da730c56f2d41b18e77a9ae63d69816c06d7ac0452b7b","sha512":"592a894ab168c6872c47c6bc8c15781d74ddc17eff909e29fe30c8ba0ca4204279d8ab8d33630405fd5193c1da2506437d1b37263e0f17578544612659e6ab51","ssdeep":"","tlshash":"3741389ef3e41cb3000b29bcd0f7aa2993d40f5f689aac383a9d7c0e2bd4511409697d","first_seen":"2026-03-31T08:36:21.232936Z","last_seen":"2026-06-05T14:14:12.165316Z","times_seen":974,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/favicon.ico","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-length: 0\r\nlocation: /en/block\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 21 Apr 2026 13:05:12 GMT; Secure\r\nx-dt: 285\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.006, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.070, bff;dur=1.24, wf-uht;dur=0.013\r\nvary: Accept-Encoding\r\nx-cache-expire: 763\r\nx-cache-hit: 1\r\nx-dt: 285\r\nx-pod: R-gktl4\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":1582,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"711bda673e0334e2e629e2cc32ab86f1","sha1":"aef675069c4aac1dbe6c143733c057539d4bdcc8","sha256":"f5e829675ec341b79c719a5e29dc35c462728ee3226b7fad473ff26ef1ad0aae","sha512":"e8b3ba8ee6531304f29a4fd71458f60160de6c8113618e0823fdd5cf2608ad974cd8d3f3c129b964d5abcbcb0d104672b49a66676c98cb8613ed2174b8fcdd7e","ssdeep":"","tlshash":"c031795d60b1853c60680676db82be449ffd405f35847a84fe0c9d9c70e2deefa2260b","first_seen":"2026-04-17T12:04:37.115823Z","last_seen":"2026-04-19T21:30:04.760233Z","times_seen":51,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f978b4369d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:22.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_f978b4369d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 389\r\ntraceparent: 00-4960473d46f4ec48ca86205f31e2cccd-93c29ade46f39844-01\r\nlast-modified: Fri, 17 Apr 2026 15:19:50 GMT\r\netag: \"3a4af5789426796fafd3970de96371be\"\r\nx-amz-meta-mtime: 1776439061.666024308\r\nexpires: Sun, 19 Apr 2026 10:48:33 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 8208\r\ncache: HIT\r\nx-cached-since: 2026-04-18T10:48:34+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":389,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (388)","md5":"3a4af5789426796fafd3970de96371be","sha1":"ebdd29b76f8e6d20d0f1e41b17e032080872ff2b","sha256":"09adb51065cb406cb94d9809a73d3a05a29ad79ff58c1042790bee2308a88a8c","sha512":"e2a8d26c266ae1347566c938c7e1dc2944f7b228b2ac2bf0ef6dc37375edb82a348cce310a05b9a117139ca00d09ec23ec53509dbd9286b14aa8bb9a3d5f73b4","ssdeep":"","tlshash":"93e0684fb19a4c35168a78e843f5d70822d7226520473c21abac982c3964aabc417e5d","first_seen":"2025-12-18T00:40:38.932063Z","last_seen":"2026-07-24T08:16:23.48126Z","times_seen":1789,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/en/block","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 2836\r\ncache-control: no-store, no-cache, must-revalidate\r\nserver-timing: dt_total;dur=0.010, dt_total;dur=0.005, total;dur=1;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 21 Apr 2026 13:05:12 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 285, 285\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1305)","md5":"64cf7c453f6fa0be2d2ed60ab40220b9","sha1":"ba93d8d804b7cc3a99a869fece89b7ada71cfa4b","sha256":"65ebff61096a678503627ca43addc9f2d6eee31bc5781f75dfc9727cb0cac8bb","sha512":"d1d3c9d79156b4b545c4963bc5e9a4f7ba26aa1fe352e87a9279ddb43fa32705e8ddfc1404b76d5ff3437b4d5fe4db8209ec224d19c1bac9d7acdfa8358f87c0","ssdeep":"","tlshash":"6851b62b5b28ce3f05106458c623e39ae5cd71bb714be498c0b84d192b8e3c3ac4f8e5","first_seen":"2026-04-09T15:38:38.410432Z","last_seen":"2026-04-20T19:36:24.580727Z","times_seen":129,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e64g0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:23.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e64g0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\nexpires: Sat, 18 Apr 2026 13:05:23 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 18 Apr 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:70:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:70:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:70:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:70:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 129549\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":370291,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"8593ec0b7690a3bc5976e1e5883e24bb","sha1":"f3efa7bc0b5b57923d9350839c830db344e9be49","sha256":"4ebd582157e1940e6f0a55b94676ff4b9939449547f8243ff922357bd5346906","sha512":"8c572d76486ac084ca5f385454575376e8fd77f7f12a793435668f372aec5d195c2ce115bb71061e5385029af636fb54e0491dcbfe3fe4a5b7bfff724da75a43","ssdeep":"6144:j+8j3PcVWDhn3BZ8os6BKPzqQjwXd2bY2YWdK:9EWn3n88NCvns","tlshash":"e87408ccb3d6746653a3a478903f008bb27a7992f84cc895f186d8e42e746994277f7c","first_seen":"2026-04-18T09:37:38.66222Z","last_seen":"2026-04-18T13:05:41.492149Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=3\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1737882608.1776517523\u0026dt=1xBet\u0026auid=477815454.1776517523\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be64g0h2v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~117884344\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1776517523733\u0026tfd=12587","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:23.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /ccm/collect?rcb=3\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1737882608.1776517523\u0026dt=1xBet\u0026auid=477815454.1776517523\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be64g0h2v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~117884344\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1776517523733\u0026tfd=12587 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:22.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\nexpires: Sat, 18 Apr 2026 13:05:23 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 178186\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":552075,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"ffca8ef560a5ea98936d12c31a50b6a0","sha1":"021a4c2d26f362dbc14e3e4b9372a4175b5551d9","sha256":"d381df1253254f287d09c60c7668aa067174d87360ca6d322d0660193132de0d","sha512":"b9df27b8545d01a460e6de542ff40fafedf06ee6802a082670cff828fa9b34f16c5596fcbf5ae53ed335e5bed53fcbd04eaaee4cd8edeb7281eed880fd59547c","ssdeep":"6144:pO4OjKgwCA4MRBZtffJPj8B3U90yIjwcHfpL7gW1e77pkN1PLAXc:Wwt4MPffJL8j5W7pkcM","tlshash":"acc409ceb3c674265396f468942f01cba97b24e2b49cc8abb1d9ccf02d3454a5167f78","first_seen":"2026-04-18T08:11:04.643879Z","last_seen":"2026-04-18T13:05:41.494535Z","times_seen":11,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":88,"dns":0,"connect":7,"send":0,"wait":21,"receive":28,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b-1x.me/nb6mnb5","fqdn":"b-1x.me","domain":"b-1x.me","tld":"me"},"ip":{"addr":"18.158.99.161","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T13:05:11.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b-1x.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 03:39:47 GMT","end":"Thu, 25 Jun 2026 03:39:46 GMT"},"fingerprint":{"sha1":"10:9B:8A:4A:DC:27:40:7E:4A:71:D0:29:78:F7:D3:F9:C4:90:CF:39","sha256":"87:A5:33:98:58:7A:41:A5:44:BB:65:77:67:D4:FD:66:3E:E3:9A:36:A3:02:D0:01:EE:7D:09:34:26:79:73:15"}}},"request":{"raw":"GET /nb6mnb5 HTTP/1.1\r\nHost: b-1x.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 18 Apr 2026 13:05:11 GMT\r\nlocation: https://1xbet.onelink.me/2qRg?pid=retention\u0026c=d_2959571m_97c_\u0026is_retargeting=true\u0026af_force_deeplink=true\u0026af_dp=xbet://open/casino?section=categories%26type=game%26id=65405%26needTransfer=false\u0026af_web_dp=https://refpa5574.com/L?tag=d_265749m_21895c_\u0026site=265749\u0026ad=21895\u0026r=casino-search?game=65405\u0026af_android_url=https://refpa5574.com/L?tag=d_265749m_21895c_\u0026site=265749\u0026ad=21895\u0026r=casino-search?game=65405\u0026af_ios_url=https://refpa5574.com/L?tag=d_265749m_21895c_\u0026site=265749\u0026ad=21895\u0026r=casino-search?game=65405\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":60,"dns":1,"connect":23,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"b-1x.me","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"b-1x.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"b-1x.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/fc","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/fc HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_\r\nX-Fc: bf5383e14dd845a2502d668a43c9fa310c8ebd46e38c7a767b68fb7db0ff7e28\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nx-uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.006, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/c087b51afb.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/c087b51afb.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-c4644ca252dbdf606f7ee4a1db8de4aa-aaa1bd2d8bc90f23-01\r\nlast-modified: Thu, 09 Apr 2026 13:51:07 GMT\r\netag: W/\"bf29e55a19aa9e4414c5ed4c811e6d0e\"\r\nx-amz-meta-mtime: 1775742611.916299456\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Apr 2026 09:20:32 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 11747\r\ncache: HIT\r\nx-cached-since: 2026-04-18T09:49:26+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7781,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7588)","md5":"bf29e55a19aa9e4414c5ed4c811e6d0e","sha1":"4a6ef1a81c67fce8958404e94ed56386da1e477e","sha256":"8715b0311728c0d1b01c94e3e071c67ef3d9afc9b239975d349811aed749d3ea","sha512":"d999432d1cd2790ac9997a83e68c213133ae2f9b4a27b43374d18d1ffdcb8b8fc8902cce047a715dc3edd0a8166a3add0f510663c56e5a74075de885adf9129b","ssdeep":"192:FhjzBlcd6BMtcdfSWq7leXqOsc8uALOCJexCePmtbJtdytT:HjzBlcduMtcdfSWq7leJfpAL9Je5PmtQ","tlshash":"1bf11bd839f870b36b6383dd3c224071472d5a46a08d58e6f9f84f6c019e68c997bb63","first_seen":"2026-04-09T09:37:58.840151Z","last_seen":"2026-04-20T22:28:57.799143Z","times_seen":176,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_1c3eaa7178.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:22.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_1c3eaa7178.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 449\r\ntraceparent: 00-7ce8c9438f9fb1a7fb1ae974179317c4-0c1a23c78c9cf1e1-01\r\nlast-modified: Fri, 17 Apr 2026 15:19:50 GMT\r\netag: \"414e8029e21e558fd9d07bd1d919c3c4\"\r\nx-amz-meta-mtime: 1776439061.663024291\r\nexpires: Sun, 19 Apr 2026 07:36:56 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 19706\r\ncache: HIT\r\nx-cached-since: 2026-04-18T07:36:56+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":449,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (448)","md5":"414e8029e21e558fd9d07bd1d919c3c4","sha1":"616aa94cb106a7684ccc214de20d5a85071f8d70","sha256":"36d14d379f6c74f3bfaf138903d6f8aa4a6e0ae6f93f45303caadb0db6c0e1fa","sha512":"1a9d8949916f0f5ad19b45dbc7804768926698fe01c32fe4b435f00294a4c2632ca1e9e79c1cb774baeb18008fe8609e374ee6d5c27e92808c41c30545ee2550","ssdeep":"","tlshash":"47f0239b38949078076e27e09373d75a7052154d744abc30f7895c5878364e6641f65c","first_seen":"2025-12-18T05:17:53.538942Z","last_seen":"2026-08-08T12:13:41.24995Z","times_seen":1289,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/entry-972de8c70b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/entry-972de8c70b.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-2db832d958b5f1165c879714321e5313-78eaf6b04b8591bb-01\r\nlast-modified: Thu, 09 Apr 2026 13:51:07 GMT\r\netag: W/\"70522afdab4dd69951bb22e4938b8773\"\r\nx-amz-meta-mtime: 1775742611.917299523\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Apr 2026 09:20:28 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 12311\r\ncache: HIT\r\nx-cached-since: 2026-04-18T09:40:01+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21584,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21084)","md5":"70522afdab4dd69951bb22e4938b8773","sha1":"b080943edffc7237d104bd49159a653babe027a0","sha256":"881c0e0c13a6520e1d2b281b358a81fbfc7c72b68d32490d511bc096f5115f15","sha512":"15eaea30e761fb31fc9d932134e23ead073bb328a9a1c1cb7fbdcae34a3db958a0126ca7a678f3bf79f93cf05fc82adc0b6050f550b51f7bcc9093f955e8bbf6","ssdeep":"384:HjI+bRffXkW4TWwOvMGwI69n2MkmueJd1UzEbwN2u6W0j7TE0zSAgqH9SoV1CcdF:HkcwWvMVI693kmueJd1UzOwNl6Bj7T9H","tlshash":"efa22f78219cf0f531cb459837f6bc5266886d1ff98afc9a409789dc03da14cc9627ae","first_seen":"2026-04-09T09:37:58.845309Z","last_seen":"2026-04-20T22:28:57.791458Z","times_seen":177,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 48\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":10273,\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.078, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2d741bd5c5ab47ca1f94b96724bcfe14","sha1":"159f5a9d6c048ae7f010f198ef61db3f98fc9765","sha256":"53dc0e5f0d255923da2f7a6a5028abfeb41fcf2a794c3bbf2b49f8929effb234","sha512":"8de91e0edb46d247c3c7fe20ca5359a8241f867e39b18cde097dcee3220ce45adc7ccc0dc265449fe1419e32f728e6ae507d631628962b8c75dd1315c95f8ae3","ssdeep":"","tlshash":"327000c082008883e80802080a2808003820800222c230f802b0a0000aa0aa0800b002","first_seen":"2026-04-18T13:05:41.499604Z","last_seen":"2026-04-18T13:05:41.499604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-5e2d959aa1f1f3f52343bcf22d07f1ae-f0d16775e450f4ba-01\r\nlast-modified: Wed, 19 Apr 2023 11:51:30 GMT\r\netag: W/\"3ae81b002dca46d3b732ce3e03ae35c6\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 09 May 2025 15:00:24 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 2292\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:27:01+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ae81b002dca46d3b732ce3e03ae35c6","sha1":"388d37b5f714937677de74330a8daab0a0d1196b","sha256":"1c76b93f07c6a861c4ad9529059ea99ae69f2451788da7cab1f17fa94d54382e","sha512":"48887848044da3a9a54b72a1f15a39ac0b30ea8ad7ddc3d4c69e51bb0479f39631d4b9098d289eecdaa9648db4118ddfa38cf76ef1a58718c67d70efc80a67a8","ssdeep":"","tlshash":"e72124be434d5bfb60025fd8967802513abaf0c2f29926ed55d674227903cf4d074955","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-07-21T05:23:56.658926Z","times_seen":2468,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:23.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\nexpires: Sat, 18 Apr 2026 13:05:23 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 18 Apr 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 146779\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431871,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7836)","md5":"b5958626d70b5125a3319077fd54fd60","sha1":"63c3d4a440f2e6d70cbd4407a8f4b9a37f805852","sha256":"05074dbf41929d4ad850525725fff269ed2309384f3a9e94989c9e611c8ca9d7","sha512":"fe83bda0426386461ad100d9426250741b273271dbb3a9879ea535f3f0752daa72172c53fe0a260cdf12a3dbc3a8e3ae226789fb42106de225c71e2e7833abe3","ssdeep":"6144:y+8jvPcVWD/1nqBZ8osjqpBKPzqQjuqdObqNi25AY+K:QECnqn8AKa6iO","tlshash":"729419cdb3d6746693a2b478903f018ba57a39a2f44cc895f186cce42d7469a4273f7c","first_seen":"2026-04-18T09:37:38.676817Z","last_seen":"2026-04-18T13:05:41.503761Z","times_seen":2,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":57,"dns":4,"connect":21,"send":0,"wait":26,"receive":25,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/bff-api/config/group/get?groups=d.customize\u0026lang=en","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.customize\u0026lang=en HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==; lng=en; cookies_agree_type=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: application/json\r\ncontent-length: 925\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.083, bff;dur=0.65, wf-uht;dur=0.012\r\nx-cache-expire: 763\r\nx-cache-hit: 1\r\nx-dt: 285\r\nx-pod: R-wc8lq\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":925,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9f8a989173f603c9b623820a1655676e","sha1":"fa8bf3c7730479ef42a9584d00de818bd8b2f48e","sha256":"ae5aba36d48e1a2a51a763092077a8d019e1a89fb30448d5ed6b237160268559","sha512":"a61fcd6be07baa69b595f83c98aa2b5d068b112024e1889bbf1f0c207c73545ddbbac4043b9616a7dc82f0fc94fdc5131ec7a51e1dcfd8f17aeec7deeb1198b4","ssdeep":"","tlshash":"3811f94e91a0623cd6614bd9d8813f189ff990a7384d7911d8199dca33e37e7d1b1303","first_seen":"2026-04-17T14:45:58.21688Z","last_seen":"2026-04-20T19:36:24.624533Z","times_seen":56,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 98\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":98,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":11054,\"m\":{\"s1\":\"4fd7303b-72d7-4a8c-82c6-3604823d1d41\"},\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 285\r\nx-time-ng: 0.012\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.005, wf-uht;dur=0.023\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eb8eba10243f0ee112564e7abbc7dfc5","sha1":"6fac0ea8f3e6c52115b3691811b29115318066cc","sha256":"f7723c078f7e737be70157d816e492c9b297e092c7740bcac2a15e05c6235b52","sha512":"80f18ddba63afafcd5568f3e56b8926ae4c22ed09d2fa398817fed1d4d7e1f27a4533fa3ac8cb092111a4928f4fbe6de2a541260aa916b3df0581d3ed004139e","ssdeep":"","tlshash":"797000800200088aa00c0008022028283820800802c2b2a80aa080080ab0aaa800ba02","first_seen":"2026-04-18T13:05:41.507866Z","last_seen":"2026-04-18T13:05:41.507866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=3\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1737882608.1776517523\u0026dt=1xBet\u0026auid=477815454.1776517523\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be64g0h2v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~117884344\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1776517523733\u0026tfd=12587","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:23.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"POST /ccm/collect?rcb=3\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1737882608.1776517523\u0026dt=1xBet\u0026auid=477815454.1776517523\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be64g0h2v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~117884344\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1776517523733\u0026tfd=12587 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\ncontent-type: text/plain\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-49657.bar\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1d86bacd346788d5890a8f6b4d1852c8.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/1d86bacd346788d5890a8f6b4d1852c8.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-7ac5a212921a083486f0059451a61025-3414872691b5d290-01\r\nlast-modified: Thu, 19 Mar 2026 13:55:16 GMT\r\netag: W/\"f0d0d45b0722fdcf0f9c860ab1146448\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:21:03 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.043\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 1531\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:39:42+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f0d0d45b0722fdcf0f9c860ab1146448","sha1":"76bffcd574e7043cf73ac663de939a8813ee7e59","sha256":"e6c255539cc2ce6e23132d1f3e5d84cc8095e2c1414fb44c06799ba783a5b6be","sha512":"51a05b3bc8dc387a3274d18b48a6a2389151b074eef86015edcf783382df7c1a5459f967daab6b299996303c3a1997e625899c3d7306af5cf1820e3058962563","ssdeep":"","tlshash":"cd41a998f7f02df3301f90b899b7a64997c80f1ba895ada4ba9d745c2f1441a0037d7e","first_seen":"2026-03-31T08:36:21.22196Z","last_seen":"2026-08-08T12:13:41.296939Z","times_seen":1128,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gmp/conversion;src=14030178;type=xbet;cat=uniqu0;rcb=10;ord=1;num=6562090499919;npa=1;auiddc=477815454.1776517523;pscdl=noapi;frm=0;_tu=KJA;gtm=45fe64g0h2v9190735530z89180563600za20gzb9180563600zd9180563600xea;gcd=13l3l3l2l1l1;dma_cps=a;dma=1;dc_fmt=4;tag_exp=0~115616986~115938465~115938468~117266401;epver=2;dc_random=1776517523_L78OgUw7hT6_3zlMi_X-MkOXdBo6wBg5HA;~oref=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock%3Fgame%3D65405%26tag%3Dd_265749m_21895c_?","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:23.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"POST /gmp/conversion;src=14030178;type=xbet;cat=uniqu0;rcb=10;ord=1;num=6562090499919;npa=1;auiddc=477815454.1776517523;pscdl=noapi;frm=0;_tu=KJA;gtm=45fe64g0h2v9190735530z89180563600za20gzb9180563600zd9180563600xea;gcd=13l3l3l2l1l1;dma_cps=a;dma=1;dc_fmt=4;tag_exp=0~115616986~115938465~115938468~117266401;epver=2;dc_random=1776517523_L78OgUw7hT6_3zlMi_X-MkOXdBo6wBg5HA;~oref=https%3A%2F%2F1xlite-49657.bar%2Fen%2Fblock%3Fgame%3D65405%26tag%3Dd_265749m_21895c_? HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 18 Apr 2026 13:05:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1xlite-49657.bar\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-11T18:56:40.920339Z","times_seen":1027532,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d4f0604a809ff3fb1de74783a4a03afe.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:12.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/d4f0604a809ff3fb1de74783a4a03afe.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:12 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-2af3a1d97f015a009538728182d476b9-61fc192cfe5d89e7-01\r\nlast-modified: Mon, 06 Apr 2026 09:07:32 GMT\r\netag: W/\"fcb239cf6ab1d2cc022b0f70fd521a76\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 06 Apr 2026 10:19:04 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.044\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 1531\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:39:41+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":11209,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fcb239cf6ab1d2cc022b0f70fd521a76","sha1":"fbe60a2f060d59a69622d3117bddcf85716d981c","sha256":"c04d61f2f4c9c2796e9c6fa1ed4d739c27323d5be8fd057705906100c4e7a960","sha512":"f4dad8317f48671ebc01b0d560dceb32cb1ceaac68c827c730ea05bd18f4afc2b1ec154813165478856e0c081618acd8748c6d23baa7f227418903e23f35e23c","ssdeep":"96:7tQJa1XQCVfA12ycvItJJBsCSMRyfiNWIz0ubdx:z1SXCUyfiNWIzrj","tlshash":"f132e6e8baf95c73021634bce5fbf91be3d81f978d49a8647a5c7c0c1f2011114aaa79","first_seen":"2026-04-06T11:38:50.615758Z","last_seen":"2026-07-21T05:23:56.605495Z","times_seen":912,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-49657.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-49657.bar","domain":"1xlite-49657.bar","tld":"bar"},"ip":{"addr":"185.175.166.186","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-49657.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:38 GMT","end":"Mon, 11 May 2026 05:20:37 GMT"},"fingerprint":{"sha1":"33:9A:85:4E:26:3F:33:CF:72:10:75:1A:A9:A7:78:59:42:29:45:07","sha256":"62:90:45:14:0A:76:01:2E:86:7A:5F:1B:58:D6:B5:40:F7:08:9D:A9:F7:3B:32:0D:70:C8:D3:DC:81:EE:CE:FF"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-49657.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 19\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mumnjgYdAT6lCAxfBAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"{\"w\":55,\"state\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.007, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-11T18:29:32.611703Z","times_seen":315994,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/dbce4a34a0.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/dbce4a34a0.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-49657.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-8e36eb0d0b245ca3a4c8256388abada1-087f669cd9d5a8d1-01\r\nlast-modified: Thu, 09 Apr 2026 13:51:07 GMT\r\netag: W/\"a97bbe5da47b5a4fe52f2e79c2b6fa8a\"\r\nx-amz-meta-mtime: 1775742611.917299523\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Apr 2026 09:20:32 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc20\r\nage: 11726\r\ncache: HIT\r\nx-cached-since: 2026-04-18T09:49:47+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1178,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1177)","md5":"a97bbe5da47b5a4fe52f2e79c2b6fa8a","sha1":"6a42fb5bb6593b33c9ae13e74355326bdf3dcfdd","sha256":"29f1adade31b303983b4bedada659d804ba875708423e4e079ccddf167b5714e","sha512":"fd2d105baf1c699e146bb036f7aef48098d7d763c84663dcff1b0886a2f66ea5a523543314ae616d49a51d9f11c03624830e3e9975244bbdfa91957e64f46db2","ssdeep":"","tlshash":"a82163be6db4e0346b501aee3d29253243c93d93954ad09b2acc43a503970185f79fbb","first_seen":"2026-04-09T09:37:58.851983Z","last_seen":"2026-04-20T22:28:57.794677Z","times_seen":176,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/e7bf6f5853492ee600f09fd1dee51cf5.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-49657.bar/en/block?game=65405\u0026tag=d_265749m_21895c_","date":"2026-04-18T13:05:13.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/colors/e7bf6f5853492ee600f09fd1dee51cf5.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-49657.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 13:05:13 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-4e9e494acc61252a49abce8dee46d12f-7c9db4f3ffa5a6dd-01\r\nlast-modified: Mon, 06 Apr 2026 10:41:17 GMT\r\netag: W/\"e7bf6f5853492ee600f09fd1dee51cf5\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Mon, 06 Apr 2026 12:48:34 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 316\r\ncache: HIT\r\nx-cached-since: 2026-04-18T12:59:57+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":45272,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45272), with no line terminators","md5":"e7bf6f5853492ee600f09fd1dee51cf5","sha1":"22f10024618e2b96aa3076032cfe658df7d043af","sha256":"1cbd584d07a713f01fab99e27a1837dc1cb06fb273a11ecaa46e3987c6fdb137","sha512":"8d54e3967b64713aa55bf59ca6cea499548ae790221ed3910783d5e8867237b5f60161338ade731ea9352e41d643651ecb4878b3853552fd2ee572ab57fbdc36","ssdeep":"768:+EO1mFS775xWt5JkyunibZhpNeInQ+ACA:+EO1mFI75xWt5JkyunibZhyInQ+AB","tlshash":"f3139d3dee91c1752a591931912c6b7b3d36e9deaa240f8fd02c23e530c5a011be5e7e","first_seen":"2026-03-27T16:38:23.079287Z","last_seen":"2026-04-27T02:35:57.075071Z","times_seen":449,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}